RLIMIT_AS and ulimit

[gianspi]

I know this is not a grsec-specific question, but maybe someone here will know the answer.

I am getting the following errors that are flooding my logs:

Mar 22 13:45:54 mail kernel: grsec: From 209.73.179.102: denied resource overstep by requesting 41025536 for RLIMIT_AS against limit 40000000 for /usr/bin/clamscan[clamdscan:11378] uid/euid:1011/1011 gid/egid:104/104, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

From reading other posts, I decided to increase memory per process to 50mb (ulimit -v) and now my ulimit looks like:

root@mail:/home/gian# ulimit -a
core file size (blocks, -c) 0
data seg size (kbytes, -d) unlimited
file size (blocks, -f) unlimited
max locked memory (kbytes, -l) unlimited
max memory size (kbytes, -m) 50000
open files (-n) 1024
pipe size (512 bytes, -p) 8
stack size (kbytes, -s) 8192
cpu time (seconds, -t) unlimited
max user processes (-u) 7168
virtual memory (kbytes, -v) 50000


But the same errors are still coming up. According to the log, it doesn't recongize the new value I inserted. Does anyone know what is wrong?

Thanks for any help,

Gian

[PaX Team]

Mar 22 13:45:54 mail kernel: grsec: From 209.73.179.102: denied resource overstep by requesting 41025536 for RLIMIT_AS against limit 40000000 for /usr/bin/clamscan[clamdscan:11378] uid/euid:1011/1011 gid/egid:104/104, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

the default AS limit is unlimited, so i guess that clamscan sets its own AS limit explicitly, you should find out where it gets that value from and change it there.